Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
File:                     1579ac51896b95038727e3223b1d7ae2507073b5.cer (raw, json)
Hash identifier:          7mT6wKuHTpBvG024iUpufzsXuwyEye2c+FVNUuYEpgc=
Subject key identifier:   98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6D231
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:23 +0000
Certificate not after:    Sat 28 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 263812
                          IP: 45.228.67.0/24
                          IP: 138.186.140.0/22
                          IP: 170.80.108.0/22
                          IP: 190.103.176.0/22
                          IP: 2800:ba0::/32

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 18:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16175665 (0xf6d231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:23 2017 GMT
            Not After : Sep 28 05:00:00 2024 GMT
        Subject: CN=1579ac51896b95038727e3223b1d7ae2507073b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:70:75:60:cd:bb:a7:7f:8f:4f:10:d3:83:
                    f2:dc:4b:b4:76:63:1c:cf:1e:00:e7:17:a8:d4:74:
                    ea:0c:c4:a8:7c:3d:b4:8f:d4:f2:0b:18:86:35:01:
                    f0:d8:80:9d:1f:82:bb:76:0d:24:2a:5c:b2:3e:ce:
                    11:d2:42:9b:e6:0d:fc:9f:18:53:4b:a3:8f:39:e8:
                    d7:03:ad:27:b9:f3:1f:1e:38:a6:1e:26:fd:3a:0b:
                    36:3c:e2:eb:d6:6d:31:c9:5d:10:7d:b8:ff:b3:24:
                    4f:90:3f:b3:bb:53:95:62:5c:c1:a4:a4:e9:0a:e4:
                    10:64:82:5e:dd:1b:47:c5:a3:94:a6:d7:e1:eb:ff:
                    9d:92:f2:59:f5:e5:5c:a8:b8:43:49:b8:88:82:24:
                    48:ab:3e:d2:83:2c:2a:83:77:e7:17:f8:cb:27:07:
                    91:fd:a2:2f:c3:d8:c3:fd:da:ce:1f:76:6f:0a:ab:
                    de:eb:99:2d:c4:5b:a2:0b:30:5b:1a:6d:9f:b1:9f:
                    2a:a9:c1:50:c8:9a:65:df:a3:99:60:c3:67:bd:a8:
                    f3:d0:a2:0d:25:12:02:62:5a:68:06:fb:e0:ab:3a:
                    a6:3f:e7:41:5c:9e:06:a2:fe:40:a6:5b:b8:50:2c:
                    57:02:e1:34:f9:12:21:38:68:be:45:00:8a:25:5b:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24
                  138.186.140.0/22
                  170.80.108.0/22
                  190.103.176.0/22
                IPv6:
                  2800:ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263812

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:e7:8d:c7:6e:b3:36:6d:9a:f6:0d:a7:9c:f9:22:a5:a3:
         4a:6f:74:b4:ad:36:dc:3a:ac:66:18:7c:56:4c:88:42:ee:f3:
         c9:03:df:7d:75:f2:96:29:08:38:20:13:9b:70:11:10:62:b4:
         54:b3:aa:e4:a2:31:65:78:4e:98:3a:e8:03:65:e8:e5:f2:20:
         fe:72:9c:e4:62:b6:c5:b6:16:00:f2:5a:55:e6:1a:55:05:5d:
         08:e8:fc:1a:88:c2:15:b7:4c:fa:91:17:6d:4d:ef:df:7e:d4:
         19:b9:ef:2d:57:46:b0:a1:7b:9a:5a:f6:67:1c:a9:f2:57:1d:
         69:f8:6d:cf:dd:dc:02:13:5a:3b:b1:ca:14:d0:dd:eb:dc:ae:
         dc:08:9c:1a:01:46:05:c3:55:cf:46:30:30:8b:de:f5:49:40:
         82:03:2a:0c:20:70:0b:80:a8:49:2b:91:5f:89:4e:86:4e:50:
         5c:92:99:14:ec:72:7d:57:7a:88:67:48:3e:df:80:a8:94:fa:
         ff:f8:1a:fc:39:8a:0b:e4:01:92:30:8f:69:d3:0d:38:73:c3:
         cb:5a:76:ac:81:5a:9b:55:ce:7f:57:f3:7f:ac:fc:3b:55:d8:
         32:8c:27:62:9c:4f:87:e4:fb:de:47:47:83:45:70:55:5a:ee:
         59:73:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----